feat: migrate from Cedar to SpiceDB authorization system

This is a major architectural change that replaces the Cedar policy-based
authorization system with SpiceDB's relation-based authorization.

Key changes:

- Migrate from Rust to Go implementation
- Replace Cedar policies with SpiceDB schema and relationships
- Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks
- Update build system and dependencies for Go ecosystem
- Maintain Envoy integration for external authorization

This change enables more flexible permission modeling through SpiceDB's
Google Zanzibar inspired relation-based system, supporting complex
hierarchical permissions that were difficult to express in Cedar.

Breaking change: Existing Cedar policies and Rust-based configuration
will no longer work and need to be migrated to SpiceDB schema.

1 files changed, 0 insertions, 153 deletions

diff --git a/vendor/time/src/lib.rs b/vendor/time/src/lib.rs
deleted file mode 100644
index d8765d17..00000000
--- a/vendor/time/src/lib.rs
+++ /dev/null
@@ -1,153 +0,0 @@
-//! # Feature flags
-//!
-//! This crate exposes a number of features. These can be enabled or disabled as shown
-//! [in Cargo's documentation](https://doc.rust-lang.org/cargo/reference/features.html). Features
-//! are _disabled_ by default unless otherwise noted.
-//!
-//! Reliance on a given feature is always indicated alongside the item definition.
-//!
-//! - `std` (_enabled by default, implicitly enables `alloc`_)
-//!
-//!   This enables a number of features that depend on the standard library.
-//!
-//! - `alloc` (_enabled by default via `std`_)
-//!
-//!   Enables a number of features that require the ability to dynamically allocate memory.
-//!
-//! - `macros`
-//!
-//!   Enables macros that provide compile-time verification of values and intuitive syntax.
-//!
-//! - `formatting` (_implicitly enables `std`_)
-//!
-//!   Enables formatting of most structs.
-//!
-//! - `parsing`
-//!
-//!   Enables parsing of most structs.
-//!
-//! - `local-offset` (_implicitly enables `std`_)
-//!
-//!   This feature enables a number of methods that allow obtaining the system's UTC offset.
-//!
-//! - `large-dates`
-//!
-//!   By default, only years within the ±9999 range (inclusive) are supported. If you need support
-//!   for years outside this range, consider enabling this feature; the supported range will be
-//!   increased to ±999,999.
-//!
-//!   Note that enabling this feature has some costs, as it means forgoing some optimizations.
-//!   Ambiguities may be introduced when parsing that would not otherwise exist.
-//!
-//! - `serde`
-//!
-//!   Enables [serde](https://docs.rs/serde) support for all types.
-//!
-//! - `serde-human-readable` (_implicitly enables `serde`, `formatting`, and `parsing`_)
-//!
-//!   Allows serde representations to use a human-readable format. This is determined by the
-//!   serializer, not the user. If this feature is not enabled or if the serializer requests a
-//!   non-human-readable format, a format optimized for binary representation will be used.
-//!
-//!   Libraries should never enable this feature, as the decision of what format to use should be up
-//!   to the user.
-//!
-//! - `rand`
-//!
-//!   Enables [rand](https://docs.rs/rand) support for all types.
-//!
-//! - `quickcheck` (_implicitly enables `alloc`_)
-//!
-//!   Enables [quickcheck](https://docs.rs/quickcheck) support for all types.
-//!
-//! - `wasm-bindgen`
-//!
-//!   Enables [wasm-bindgen](https://github.com/rustwasm/wasm-bindgen) support for converting
-//!   [JavaScript dates](https://rustwasm.github.io/wasm-bindgen/api/js_sys/struct.Date.html), as
-//!   well as obtaining the UTC offset from JavaScript.
-
-#![doc(html_playground_url = "https://play.rust-lang.org")]
-#![cfg_attr(docsrs, feature(doc_auto_cfg, doc_notable_trait))]
-#![no_std]
-#![doc(html_favicon_url = "https://avatars0.githubusercontent.com/u/55999857")]
-#![doc(html_logo_url = "https://avatars0.githubusercontent.com/u/55999857")]
-#![doc(test(attr(deny(warnings))))]
-
-#[allow(unused_extern_crates)]
-#[cfg(feature = "alloc")]
-extern crate alloc;
-
-#[cfg(feature = "std")]
-extern crate std;
-
-mod date;
-mod duration;
-pub mod error;
-pub mod ext;
-#[cfg(any(feature = "formatting", feature = "parsing"))]
-pub mod format_description;
-#[cfg(feature = "formatting")]
-pub mod formatting;
-mod hint;
-#[cfg(feature = "std")]
-mod instant;
-mod internal_macros;
-mod interop;
-#[cfg(feature = "macros")]
-pub mod macros;
-mod month;
-mod offset_date_time;
-#[cfg(feature = "parsing")]
-pub mod parsing;
-mod primitive_date_time;
-#[cfg(feature = "quickcheck")]
-mod quickcheck;
-#[cfg(feature = "rand")]
-mod rand;
-#[cfg(feature = "serde")]
-pub mod serde;
-mod sys;
-#[cfg(test)]
-mod tests;
-mod time;
-mod utc_date_time;
-mod utc_offset;
-pub mod util;
-mod weekday;
-
-pub use time_core::convert;
-
-pub use crate::date::Date;
-pub use crate::duration::Duration;
-pub use crate::error::Error;
-#[doc(hidden)]
-#[cfg(feature = "std")]
-#[allow(deprecated)]
-pub use crate::instant::Instant;
-pub use crate::month::Month;
-pub use crate::offset_date_time::OffsetDateTime;
-pub use crate::primitive_date_time::PrimitiveDateTime;
-pub use crate::time::Time;
-pub use crate::utc_date_time::UtcDateTime;
-pub use crate::utc_offset::UtcOffset;
-pub use crate::weekday::Weekday;
-
-/// An alias for [`std::result::Result`] with a generic error from the time crate.
-pub type Result<T> = core::result::Result<T, Error>;
-
-/// This is a separate function to reduce the code size of `expect_opt!`.
-#[inline(never)]
-#[cold]
-#[track_caller]
-const fn expect_failed(message: &str) -> ! {
-    panic!("{}", message)
-}
-
-/// Returns the size of the pointed-to value in bytes.
-///
-/// This is a `const fn` in the standard library starting in Rust 1.85. When MSRV is at least that,
-/// this can be removed.
-#[allow(unused_qualifications)] // added to prelude after MSRV
-const fn size_of_val<T>(_: &T) -> usize {
-    core::mem::size_of::<T>()
-}